Intelligence
Built to an uncompromising standard, exposing hostile intent, anticipating the next move, and outmaneuvering the most capable nation state adversaries by turning raw noise into advantage long before they strike.
Cyber Threat Intelligence, Entrepreneur, Presentation Virtuoso
Hello and こんにちは!
I am Scott Jarkoff (ジャーカフ スコット),
a threat intelligence and cyber security professional, entrepreneur, visionary leader, presentation virtuoso, cyclist, tech geek, and wannabe iPhone photographer living and working in the heart of Tokyo, Japan.
a powerhouse on-stage speaker, delivering electrifying and profoundly impactful keynotes that captivate, challenge, and inspire.
a remarkably creative presenter featuring incredible visuals combined with striking insights on cyber threat actors, their evolving tradecraft, and the attacks defining modern cyber warfare. I illuminate the future of generative AI in offensive operations, the shifting cyber security landscape, and the critical thought leadership shaping the next era of digital conflict.
I write about cyber security, sophisticated cyber adversaries, global cyber attacks, threat intelligence, the eCrime ecosystem and the dark web economy, leadership, global and domestic travel, hiking trips in Japan, and occasionally post various photos taken with an iPhone and meager composition skills.
I am the ambitious co-founder and mastermind behind deviantART, the largest and most vibrant online art community the world has ever seen, launched on August 7, 2000.
I am orchestrating the inception of Praeryx, a new cyber threat intelligence startup currently in deep development.
the quiet architect of jark after dark, a nocturnal pursuit of the uncomfortable questions hiding behind polished narratives, built for those who suspect the official story is never the whole one.
Finally, I live in Tokyo, Japan, where I architect and oversee these mission critical operations.
Reach out to me for inquiries.
Three decades across government and industry have forged a rare command of cyber security and threat intelligence. My experience spans technology and code, entrepreneurship, and the global stage. I have written software, scoured security logs, administered firewalls, and architected defense-grade systems. I have built companies, led exceptional teams, and directed regional intelligence strategy. I translate complex cyber realities into language understood from the engineering floor to the boardroom and the halls of government. In today’s sophisticated threat landscape, the ability to decode chaos into clarity and transform understanding into decisive action is not optional. It is imperative.
Built to an uncompromising standard, exposing hostile intent, anticipating the next move, and outmaneuvering the most capable nation state adversaries by turning raw noise into advantage long before they strike.
Exceeding expectations is only the baseline. I build and lead elite teams where innovation thrives, collaboration becomes a force multiplier, and elegant solutions achieve what others consider impossible.
Co-founder of deviantART and Praeryx, developing and building ambitious ventures, challenging established industries, and transforming revolutionary ideas into platforms, companies, and global communities with lasting impact.
Electrifying keynotes and commanding panel conversations exposing the forces reshaping cyber conflict, shattering conventional thinking, and leaving audiences with a radically clearer view of what comes next.
The modern threat landscape no longer respects borders, industries, or operational domains. Nation state adversaries pursue strategic advantage through espionage and disruption. eCrime operations industrialize intrusion for profit. Hacktivists weaponize access, narrative, and attention. Artificial intelligence compresses timelines and expands reach. Understanding each force in isolation is no longer enough. The real advantage comes from seeing how they converge.
State sponsored operations pursue long-term strategic advantage through espionage, intellectual property theft, surveillance, disruption, and influence. Campaigns target governments, defense, technology, critical infrastructure, and the institutions shaping geopolitical power.
Financially motivated adversaries operate an industrialized ecosystem of ransomware, extortion, access brokers, fraud, underground markets, and cryptocurrency laundering. Specialization turns compromise into profit with global reach, speed, and ruthless efficiency.
Ideologically motivated actors use disruption, data leaks, defacement, and influence operations to seize attention and apply pressure. Activity intensifies during geopolitical crises, where activism, coercion, opportunism, and state interests increasingly overlap.
Artificial intelligence is accelerating reconnaissance, social engineering, vulnerability research, malware development, and influence operations. It lowers cost, expands reach, and compresses the time between intent and impact, giving capable adversaries a powerful force multiplier.
Binance has repaid its customers, but around US$3 billion stolen by North Korea still sits in bitcoin and ether no issuer can freeze. Automated laundering, a Polygon hard fork proposal, terrorism judgment creditors, and stalled sanctions now decide whether Pyongyang ever profits from the theft.
SCKit is built to wait for an MSP technician to connect, then ride that session to every other client. It arrived through a forgotten ScreenConnect extension weeks after Storm-0940 abused ConnectWise cloud identities. Adversaries are now working the authority MSPs granted and never took back.
One day after North Korea stole US$6.34 billion from Binance, a seller began advertising 335.9 million lines of its data, later under the ShinyHunters name. Binance calls it a likely scam. The data looks recycled, the private keys implausible, and the phishing it invites is already real.
Poland disconnected ePUAP after stopping what its minister calls preparation for a December attack. Police seized 235 servers behind Gootloader, CastleRAT, and StealC, United blocked AI agents, France blamed Iran for sabotage hacktivists claimed, and C3RB3R encrypted unpatched Synology storage.
The Justice Department won court authority over US$1.2 billion stolen from Binance, but North Korea's loss is not yet Binance's gain. Three legal paths point at the same money, and the unpublished forfeiture theory decides which one wins, while US$2.8 billion sits in addresses linked to the theft.
A fake Chrome warning only chosen visitors see, a backdoor inside Latin American carriers, and a Linux rootkit in Asia share one malware framework. Check Point says a supplier arms several Chinese threat actors, ESET sees one adversary, and Trend has caught access itself changing hands.
Barracuda gateways face an exploited path to root, WhiteArmor claims data from a Maersk acquisition, prosecutors say AI impersonators stole US$129 million, and SonicWall VPNs let alternate credentials evade SAML controls. The cases expose the danger of authority inherited across trust boundaries.
Turla hid Cereal inside the Exchange servers of a Kazakh and a Romanian government organization, collecting on a Moscow treaty ally and on NATO and EU correspondence without a single command-and-control server, which leaves takedowns, blocklists, and the EU sanctions of July with nothing to seize.
Russia stopped publishing its war dead but never stopped counting them. Hackers say they spent six months inside Rosstat and took 11 million death certificates. I examine whether the data is real, who gains from it, and how Moscow’s own secrecy built the target its adversaries finally hit.
An Outlook zero-day leaks NTLMv2 authentication responses, Chrome faces its eighth exploited zero-day of 2026, BYOD claims Vanderbilt, and Arara’s breach exposes more than 81 million email addresses.
Sixteen AI developer platforms disclosed breaches in five weeks. The best-documented ones trace to credentials earlier cleanups left valid, and the stolen keys fed resellers whose buyers range from discount hunters to labs accused of distillation, while victims pay for every call made in their name.
Free. Open access. Independent daily cyber security analysis, available to everyone.
Standard. Complete access. Every written analysis, every member-only deep dive, and the full archive.
Premium intelligence. Formal cyber threat intelligence reporting, downloadable data, and practical training.
Co-Founder
2024-Current
Director, Threat Intelligence Strategy, APJ & META
2019-2024
Senior Security Advisor
2013-2019
Chief, Cyber Security
2008-2013
Senior Systems Engineer
2005-2008
Co-Founder
2000-2005
Security Operations Center Supervisor
2000-2005
Telecommunications & Cyber Security
1990-1999